@azure/attestation 1.0.1-alpha.20241022.1 → 1.0.1-alpha.20241024.1

package/dist/commonjs/attestationClient.d.ts

@@ -0,0 +1,209 @@
+import { AttestationResult, AttestationSigner, AttestationTokenValidationOptions } from "./models/index.js";
+import { AttestationResponse } from "./models/attestationResponse.js";
+import { TokenCredential } from "@azure/core-auth";
+import { CommonClientOptions, OperationOptions } from "@azure/core-client";
+/**
+ * Attestation Client Construction Options.
+ */
+export interface AttestationClientOptions extends CommonClientOptions {
+    /**
+     * Validation options to be used to validate attestation tokens received
+     * from the attestation service.
+     */
+    validationOptions?: AttestationTokenValidationOptions;
+}
+/**
+ * Operation options for the Attestation Client operations.
+ */
+export interface AttestationClientOperationOptions extends OperationOptions {
+    /**
+     * Validation options to be used to validate attestation tokens received
+     * from the attestation service for the individual operation.
+     */
+    validationOptions?: AttestationTokenValidationOptions;
+}
+/**
+ * Optional parameters for the AttestOpenEnclave API.
+ *
+ * @param initTimeData - data provided at the time the enclave was initialized.
+ * @param runTimeData - data provided at the time the SGX quote being attested was created.
+ * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.
+ */
+export interface AttestOpenEnclaveOptions extends AttestationClientOperationOptions {
+    /**
+     *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.
+     *
+     */
+    initTimeData?: Uint8Array | Buffer | Blob;
+    /**
+     * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.
+     */
+    initTimeJson?: Uint8Array | Buffer | Blob;
+    /**
+     * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.
+     */
+    runTimeData?: Uint8Array | Buffer | Blob;
+    /**
+     * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.
+     */
+    runTimeJson?: Uint8Array | Buffer | Blob;
+    /**
+     * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.
+     */
+    draftPolicyForAttestation?: string;
+}
+/**
+ * Optional parameters for the AttestSgxEnclave API.
+ *
+ * @param initTimeData - data provided at the time the enclave was initialized.
+ * @param runTimeData - data provided at the time the SGX quote being attested was created.
+ * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.
+ */
+export interface AttestSgxEnclaveOptions extends AttestationClientOperationOptions {
+    /**
+     *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.
+     *
+     */
+    initTimeData?: Uint8Array | Buffer | Blob;
+    /**
+     * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.
+     */
+    initTimeJson?: Uint8Array | Buffer | Blob;
+    /**
+     * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.
+     */
+    runTimeData?: Uint8Array | Buffer | Blob;
+    /**
+     * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.
+     */
+    runTimeJson?: Uint8Array | Buffer | Blob;
+    /**
+     * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.
+     */
+    draftPolicyForAttestation?: string;
+}
+/**
+ * Operation options for the AttestTpm API.
+ */
+export interface AttestTpmOptions extends AttestationClientOperationOptions {
+}
+/**
+ * Attestation Client class.
+ *
+ * The AttestationClient class enables access to the Attestation related APIs:
+ *
+ * - getOpenIdMetadata
+ * - getAttestationSigners
+ * - attestSgxEnclave
+ * - attestOpenEnclave
+ * - attestTpm
+ */
+export declare class AttestationClient {
+    /**
+     * Creates an instance of AttestationClient.
+     *
+     * Example usage:
+     * ```ts
+     * import { AttestationClient } from "@azure/attestation";
+     *
+     * const client = new AttestationClient(
+     *    "<service endpoint>"
+     * );
+     * ```
+     *
+     * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.
+     * @param options - Options used to configure the Attestation Client.
+     *
+     */
+    constructor(endpoint: string, options?: AttestationClientOptions);
+    /**
+     * Creates an instance of AttestationClient with options and credentials.
+     *
+     * Example usage:
+     * ```ts
+     * import { AttestationClient } from "@azure/attestation";
+     *
+     * const client = new AttestationClient(
+     *    "<service endpoint>",
+     *    new TokenCredential("<>"),
+     *    { tokenValidationOptions: { validateToken: false } }
+     * );
+     * ```
+     *
+     * Note that credentials are required to call the `attestTpm` API.
+     *
+     * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.
+     * @param credentials - Credentials used to configure the attestation client.
+     *
+     */
+    constructor(endpoint: string, credentials: TokenCredential, options?: AttestationClientOptions);
+    /** Attests an OpenEnclave report generated from an SGX Enclave using the OpenEnclave SDK.
+     *
+     * @param report - An OpenEnclave report generated by an SGX enclave.
+     * @param options - Operation options for the attestOpenEnclave API call.
+     * @returns Returns an AttestationResponse whose body is an AttestationResult describing
+     *    the claims returned by the attestation service.
+     *
+     * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.
+     * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.
+     * @throws {@link Error} if the `initTimeJson` option is provided and the value of `initTimeJson` is not JSON.
+     * @throws {@link Error} if the `runTimeJson` option is provided and the value of `runTimeJson` is not JSON.
+     */
+    attestOpenEnclave(report: Uint8Array | Buffer | Blob, options?: AttestOpenEnclaveOptions): Promise<AttestationResponse<AttestationResult>>;
+    /** Attests a quote generated from SGX Enclave using the Intel SDK.
+     *
+     * @param quote - An SGX quote generated by an SGX enclave.
+     * @param options - Operation options for the attestOpenEnclave API call.
+     * @returns Returns an AttestationResponse whose body is an AttestationResult describing
+     *    the claims returned by the attestation service.
+     * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.
+     * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.
+     */
+    attestSgxEnclave(quote: Uint8Array | Buffer | Blob, options?: AttestSgxEnclaveOptions): Promise<AttestationResponse<AttestationResult>>;
+    /** Attest a TPM based enclave.
+  
+     * See the  {@link https://docs.microsoft.com/en-us/azure/attestation/virtualization-based-security-protocol | TPM Attestation Protocol Reference} for more information.
+     *
+     * @param request - Incoming request to send to the TPM attestation service, Utf8 encoded.
+     * @param options - Pipeline options for TPM attestation request.
+     * @returns A structure containing the response from the TPM attestation, Utf8 encoded.
+     *
+     * @remarks
+     *
+     * The incoming requests to the TPM attestation API are stringified JSON objects.
+     *
+     * @example
+     * For example, the initial call for a TPM attestation operation is:
+     *
+     * ```js
+     * const encodedPayload = JSON.stringify({ payload: { type: "aikcert" } });
+     * const result = await client.attestTpm(encodedPayload);
+     * ```
+     *
+     * where stringToBytes converts the string to UTF8.
+     *
+     * Note that the attestTpm requires an attestation client which is configured with
+     * authentication credentials.
+     *
+     */
+    attestTpm(request: string, options?: AttestTpmOptions): Promise<string>;
+    /**
+     * Returns the list of attestation signers which can be used to sign attestation
+     * service tokens.
+     *
+     * @param options - Client operation options.
+     * @returns the set of AttestationSigners which may be used to sign attestation tokens.
+     */
+    getAttestationSigners(options?: AttestationClientOperationOptions): Promise<AttestationSigner[]>;
+    /**
+     * Returns the OpenID Metadata discovery document for the attestation service instance.
+     * @param options - Client operation options.
+     * @returns The OpenID metadata discovery document for the attestation service.
+     */
+    getOpenIdMetadata(options?: AttestationClientOperationOptions): Promise<Record<string, unknown>>;
+    private _client;
+    private _validationOptions?;
+    private _signers?;
+    private _signingKeys;
+}
+//# sourceMappingURL=attestationClient.d.ts.map

package/dist/commonjs/attestationClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationClient.d.ts","sourceRoot":"","sources":["../../src/attestationClient.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iCAAiC,EAClC,MAAM,mBAAmB,CAAC;AAa3B,OAAO,EAAE,mBAAmB,EAA6B,MAAM,iCAAiC,CAAC;AAGjG,OAAO,EAAE,eAAe,EAAqB,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAQ3E;;GAEG;AACH,MAAM,WAAW,wBAAyB,SAAQ,mBAAmB;IACnE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;GAEG;AACH,MAAM,WAAW,iCAAkC,SAAQ,gBAAgB;IACzE;;;OAGG;IACH,iBAAiB,CAAC,EAAE,iCAAiC,CAAC;CACvD;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAyB,SAAQ,iCAAiC;IACjF;;;OAGG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAwB,SAAQ,iCAAiC;IAChF;;;OAGG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,YAAY,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAE1C;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IAEzC;;OAEG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,gBAAiB,SAAQ,iCAAiC;CAAG;AAE9E;;;;;;;;;;GAUG;AACH,qBAAa,iBAAiB;IAC5B;;;;;;;;;;;;;;;OAeG;gBACgB,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,wBAAwB;IAEvE;;;;;;;;;;;;;;;;;;;OAmBG;gBAED,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,eAAe,EAC5B,OAAO,CAAC,EAAE,wBAAwB;IAmCpC;;;;;;;;;;;OAWG;IACU,iBAAiB,CAC5B,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,EAClC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAqElD;;;;;;;;OAQG;IACU,gBAAgB,CAC3B,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,mBAAmB,CAAC,iBAAiB,CAAC,CAAC;IAoElD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACU,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC;IAkBxF;;;;;;OAMG;IACU,qBAAqB,CAEhC,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAe/B;;;;OAIG;IACU,iBAAiB,CAE5B,OAAO,GAAE,iCAAsC,GAC9C,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAWnC,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,kBAAkB,CAAC,CAAoC;IAC/D,OAAO,CAAC,QAAQ,CAAC,CAAsB;YAEzB,YAAY;CAY3B"}

package/dist/commonjs/attestationClient.js

@@ -0,0 +1,243 @@
+"use strict";
+// Copyright (c) Microsoft Corporation.
+// Licensed under the MIT License.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AttestationClient = void 0;
+const tslib_1 = require("tslib");
+const generatedClient_js_1 = require("./generated/generatedClient.js");
+const index_js_1 = require("./generated/models/index.js");
+const logger_js_1 = require("./logger.js");
+const Mappers = tslib_1.__importStar(require("./generated/models/mappers.js"));
+const attestationResponse_js_1 = require("./models/attestationResponse.js");
+const typeDeserializer_js_1 = require("./utils/typeDeserializer.js");
+const core_auth_1 = require("@azure/core-auth");
+const utf8_js_1 = require("./utils/utf8.js");
+const attestationResult_js_1 = require("./models/attestationResult.js");
+const attestationSigner_js_1 = require("./models/attestationSigner.js");
+const attestationToken_js_1 = require("./models/attestationToken.js");
+const buffer_js_1 = require("./utils/buffer.js");
+const tracing_js_1 = require("./generated/tracing.js");
+/**
+ * Attestation Client class.
+ *
+ * The AttestationClient class enables access to the Attestation related APIs:
+ *
+ * - getOpenIdMetadata
+ * - getAttestationSigners
+ * - attestSgxEnclave
+ * - attestOpenEnclave
+ * - attestTpm
+ */
+class AttestationClient {
+    constructor(endpoint, credentialsOrOptions, clientOptions = {}) {
+        let credentialScopes = undefined;
+        let credential = undefined;
+        let options;
+        if (credentialsOrOptions && (0, core_auth_1.isTokenCredential)(credentialsOrOptions)) {
+            credential = credentialsOrOptions;
+            credentialScopes = ["https://attest.azure.net/.default"];
+            options = clientOptions;
+        }
+        else {
+            options = credentialsOrOptions || {};
+        }
+        const internalPipelineOptions = Object.assign(Object.assign({}, options), {
+            credentialScopes: credentialScopes,
+            credential: credential,
+            loggingOptions: {
+                logger: logger_js_1.logger.info,
+                allowedHeaderNames: ["x-ms-request-id", "x-ms-maa-service-version"],
+            },
+        });
+        this._client = new generatedClient_js_1.GeneratedClient(endpoint, internalPipelineOptions);
+        this._validationOptions = options.validationOptions;
+    }
+    /** Attests an OpenEnclave report generated from an SGX Enclave using the OpenEnclave SDK.
+     *
+     * @param report - An OpenEnclave report generated by an SGX enclave.
+     * @param options - Operation options for the attestOpenEnclave API call.
+     * @returns Returns an AttestationResponse whose body is an AttestationResult describing
+     *    the claims returned by the attestation service.
+     *
+     * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.
+     * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.
+     * @throws {@link Error} if the `initTimeJson` option is provided and the value of `initTimeJson` is not JSON.
+     * @throws {@link Error} if the `runTimeJson` option is provided and the value of `runTimeJson` is not JSON.
+     */
+    async attestOpenEnclave(report, options = {}) {
+        return tracing_js_1.tracingClient.withSpan("AttestationClient-attestOpenEnclave", options, async (updatedOptions) => {
+            var _a, _b, _c, _d;
+            if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {
+                throw new Error("Cannot provide both initTimeData and initTimeJson.");
+            }
+            if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {
+                throw new Error("Cannot provide both runTimeData and runTimeJson.");
+            }
+            const initData = await (0, buffer_js_1.Uint8ArrayFromInput)((_a = options.initTimeData) !== null && _a !== void 0 ? _a : options.initTimeJson);
+            const initTimeData = initData
+                ? {
+                    data: initData,
+                    dataType: options.initTimeJson !== undefined ? index_js_1.KnownDataType.Json : index_js_1.KnownDataType.Binary,
+                }
+                : undefined;
+            const runData = await (0, buffer_js_1.Uint8ArrayFromInput)((_b = options.runTimeData) !== null && _b !== void 0 ? _b : options.runTimeJson);
+            const runTimeData = runData
+                ? {
+                    data: runData,
+                    dataType: options.runTimeJson !== undefined ? index_js_1.KnownDataType.Json : index_js_1.KnownDataType.Binary,
+                }
+                : undefined;
+            const attestationResponse = await this._client.attestation.attestOpenEnclave({
+                report: await (0, buffer_js_1.Uint8ArrayFromInput)(report),
+                initTimeData: initTimeData,
+                runtimeData: runTimeData,
+                draftPolicyForAttestation: (_c = options.draftPolicyForAttestation) !== null && _c !== void 0 ? _c : undefined,
+            }, updatedOptions);
+            const token = new attestationToken_js_1.AttestationTokenImpl(attestationResponse.token);
+            const problems = token.getTokenProblems(await this._signingKeys(), (_d = options.validationOptions) !== null && _d !== void 0 ? _d : this._validationOptions);
+            if (problems.length) {
+                throw new Error(problems.join(";"));
+            }
+            const attestationResult = typeDeserializer_js_1.TypeDeserializer.deserialize(token.getBody(), {
+                GeneratedAttestationResult: Mappers.GeneratedAttestationResult,
+                JsonWebKey: Mappers.JsonWebKey,
+            }, "GeneratedAttestationResult");
+            return (0, attestationResponse_js_1.createAttestationResponse)(token, (0, attestationResult_js_1._attestationResultFromGenerated)(attestationResult));
+        });
+    }
+    /** Attests a quote generated from SGX Enclave using the Intel SDK.
+     *
+     * @param quote - An SGX quote generated by an SGX enclave.
+     * @param options - Operation options for the attestOpenEnclave API call.
+     * @returns Returns an AttestationResponse whose body is an AttestationResult describing
+     *    the claims returned by the attestation service.
+     * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.
+     * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.
+     */
+    async attestSgxEnclave(quote, options = {}) {
+        return tracing_js_1.tracingClient.withSpan("AttestationClient-attestSgxEnclave", options, async (updatedOptions) => {
+            var _a, _b, _c, _d;
+            if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {
+                throw new Error("Cannot provide both initTimeData and initTimeJson.");
+            }
+            if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {
+                throw new Error("Cannot provide both runTimeData and runTimeJson.");
+            }
+            const initData = await (0, buffer_js_1.Uint8ArrayFromInput)((_a = options.initTimeData) !== null && _a !== void 0 ? _a : options.initTimeJson);
+            const initTimeData = initData
+                ? {
+                    data: initData,
+                    dataType: options.initTimeJson !== undefined ? index_js_1.KnownDataType.Json : index_js_1.KnownDataType.Binary,
+                }
+                : undefined;
+            const runData = await (0, buffer_js_1.Uint8ArrayFromInput)((_b = options.runTimeData) !== null && _b !== void 0 ? _b : options.runTimeJson);
+            const runTimeData = runData
+                ? {
+                    data: runData,
+                    dataType: options.runTimeJson !== undefined ? index_js_1.KnownDataType.Json : index_js_1.KnownDataType.Binary,
+                }
+                : undefined;
+            const attestationResponse = await this._client.attestation.attestSgxEnclave({
+                quote: await (0, buffer_js_1.Uint8ArrayFromInput)(quote),
+                initTimeData: initTimeData,
+                runtimeData: runTimeData,
+                draftPolicyForAttestation: (_c = options.draftPolicyForAttestation) !== null && _c !== void 0 ? _c : undefined,
+            }, updatedOptions);
+            const token = new attestationToken_js_1.AttestationTokenImpl(attestationResponse.token);
+            const problems = token.getTokenProblems(await this._signingKeys(), (_d = options.validationOptions) !== null && _d !== void 0 ? _d : this._validationOptions);
+            if (problems.length) {
+                throw new Error(problems.join(";"));
+            }
+            const attestationResult = typeDeserializer_js_1.TypeDeserializer.deserialize(token.getBody(), {
+                GeneratedAttestationResult: Mappers.GeneratedAttestationResult,
+                JsonWebKey: Mappers.JsonWebKey,
+            }, "GeneratedAttestationResult");
+            return (0, attestationResponse_js_1.createAttestationResponse)(token, (0, attestationResult_js_1._attestationResultFromGenerated)(attestationResult));
+        });
+    }
+    /** Attest a TPM based enclave.
+  
+     * See the  {@link https://docs.microsoft.com/en-us/azure/attestation/virtualization-based-security-protocol | TPM Attestation Protocol Reference} for more information.
+     *
+     * @param request - Incoming request to send to the TPM attestation service, Utf8 encoded.
+     * @param options - Pipeline options for TPM attestation request.
+     * @returns A structure containing the response from the TPM attestation, Utf8 encoded.
+     *
+     * @remarks
+     *
+     * The incoming requests to the TPM attestation API are stringified JSON objects.
+     *
+     * @example
+     * For example, the initial call for a TPM attestation operation is:
+     *
+     * ```js
+     * const encodedPayload = JSON.stringify({ payload: { type: "aikcert" } });
+     * const result = await client.attestTpm(encodedPayload);
+     * ```
+     *
+     * where stringToBytes converts the string to UTF8.
+     *
+     * Note that the attestTpm requires an attestation client which is configured with
+     * authentication credentials.
+     *
+     */
+    async attestTpm(request, options = {}) {
+        return tracing_js_1.tracingClient.withSpan("AttestationClient-attestSgxEnclave", options, async (updatedOptions) => {
+            const response = await this._client.attestation.attestTpm({ data: (0, utf8_js_1.stringToBytes)(request) }, updatedOptions);
+            if (response.data) {
+                return (0, utf8_js_1.bytesToString)(response.data);
+            }
+            else {
+                throw Error("Internal error - response data cannot be undefined.");
+            }
+        });
+    }
+    /**
+     * Returns the list of attestation signers which can be used to sign attestation
+     * service tokens.
+     *
+     * @param options - Client operation options.
+     * @returns the set of AttestationSigners which may be used to sign attestation tokens.
+     */
+    async getAttestationSigners(
+    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options
+    options = {}) {
+        return tracing_js_1.tracingClient.withSpan("AttestationClient-getAttestationSigners", options, async (updatedOptions) => {
+            var _a;
+            const signingCertificates = await this._client.signingCertificates.get(updatedOptions);
+            const signers = new Array();
+            (_a = signingCertificates.keys) === null || _a === void 0 ? void 0 : _a.forEach((element) => {
+                signers.push((0, attestationSigner_js_1._attestationSignerFromGenerated)(element));
+            });
+            return signers;
+        });
+    }
+    /**
+     * Returns the OpenID Metadata discovery document for the attestation service instance.
+     * @param options - Client operation options.
+     * @returns The OpenID metadata discovery document for the attestation service.
+     */
+    async getOpenIdMetadata(
+    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options
+    options = {}) {
+        return tracing_js_1.tracingClient.withSpan("AttestationClient-getOpenIdMetadata", options, async (updatedOptions) => {
+            const configs = await this._client.metadataConfiguration.get(updatedOptions);
+            return configs;
+        });
+    }
+    async _signingKeys() {
+        var _a;
+        if (this._signers !== undefined) {
+            return this._signers;
+        }
+        const jwks = await this._client.signingCertificates.get();
+        const signers = new Array();
+        (_a = jwks.keys) === null || _a === void 0 ? void 0 : _a.forEach((element) => {
+            signers.push((0, attestationSigner_js_1._attestationSignerFromGenerated)(element));
+        });
+        this._signers = signers;
+        return this._signers;
+    }
+}
+exports.AttestationClient = AttestationClient;
+//# sourceMappingURL=attestationClient.js.map

package/dist/commonjs/attestationClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attestationClient.js","sourceRoot":"","sources":["../../src/attestationClient.ts"],"names":[],"mappings":";AAAA,uCAAuC;AACvC,kCAAkC;;;;AAElC,uEAAiE;AAQjE,0DAKqC;AAErC,2CAAqC;AAErC,+EAAyD;AAEzD,4EAAiG;AAEjG,qEAA+D;AAC/D,gDAAsE;AAEtE,6CAA+D;AAC/D,wEAAgF;AAChF,wEAAgF;AAChF,sEAAoE;AACpE,iDAAwD;AACxD,uDAAuD;AAmGvD;;;;;;;;;;GAUG;AACH,MAAa,iBAAiB;IA4C5B,YACE,QAAgB,EAChB,oBAAiE,EACjE,gBAA0C,EAAE;QAE5C,IAAI,gBAAgB,GAAyB,SAAS,CAAC;QACvD,IAAI,UAAU,GAAgC,SAAS,CAAC;QACxD,IAAI,OAAiC,CAAC;QAEtC,IAAI,oBAAoB,IAAI,IAAA,6BAAiB,EAAC,oBAAoB,CAAC,EAAE,CAAC;YACpE,UAAU,GAAG,oBAAoB,CAAC;YAClC,gBAAgB,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACzD,OAAO,GAAG,aAAa,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,oBAAoB,IAAI,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,uBAAuB,mCACxB,OAAO,GACP;YACD,gBAAgB,EAAE,gBAAgB;YAClC,UAAU,EAAE,UAAU;YACtB,cAAc,EAAE;gBACd,MAAM,EAAE,kBAAM,CAAC,IAAI;gBACnB,kBAAkB,EAAE,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;aACpE;SACF,CACF,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,IAAI,oCAAe,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;QACtE,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;OAWG;IACI,KAAK,CAAC,iBAAiB,CAC5B,MAAkC,EAClC,UAAoC,EAAE;QAEtC,OAAO,0BAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YAEtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAC1E;gBACE,MAAM,EAAE,MAAM,IAAA,+BAAmB,EAAC,MAAM,CAAC;gBACzC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,sCAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,IAAA,kDAAyB,EAC9B,KAAK,EACL,IAAA,sDAA+B,EAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,gBAAgB,CAC3B,KAAiC,EACjC,UAAmC,EAAE;QAErC,OAAO,0BAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YAED,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBAC3E,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,YAAY,mCAAI,OAAO,CAAC,YAAY,CAAC,CAAC;YAEzF,MAAM,YAAY,GAA6B,QAAQ;gBACrD,CAAC,CAAC;oBACE,IAAI,EAAE,QAAQ;oBACd,QAAQ,EACN,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBACjF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,OAAO,GAAG,MAAM,IAAA,+BAAmB,EAAC,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,WAAW,CAAC,CAAC;YACtF,MAAM,WAAW,GAA4B,OAAO;gBAClD,CAAC,CAAC;oBACE,IAAI,EAAE,OAAO;oBACb,QAAQ,EACN,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAa,CAAC,MAAM;iBAChF;gBACH,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,gBAAgB,CACzE;gBACE,KAAK,EAAE,MAAM,IAAA,+BAAmB,EAAC,KAAK,CAAC;gBACvC,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,WAAW;gBACxB,yBAAyB,EAAE,MAAA,OAAO,CAAC,yBAAyB,mCAAI,SAAS;aAC1E,EACD,cAAc,CACf,CAAC;YAEF,MAAM,KAAK,GAAG,IAAI,0CAAoB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CACrC,MAAM,IAAI,CAAC,YAAY,EAAE,EACzB,MAAA,OAAO,CAAC,iBAAiB,mCAAI,IAAI,CAAC,kBAAkB,CACrD,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,iBAAiB,GAAG,sCAAgB,CAAC,WAAW,CACpD,KAAK,CAAC,OAAO,EAAE,EACf;gBACE,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;gBAC9D,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,EACD,4BAA4B,CACC,CAAC;YAEhC,OAAO,IAAA,kDAAyB,EAC9B,KAAK,EACL,IAAA,sDAA+B,EAAC,iBAAiB,CAAC,CACnD,CAAC;QACJ,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACI,KAAK,CAAC,SAAS,CAAC,OAAe,EAAE,UAA4B,EAAE;QACpE,OAAO,0BAAa,CAAC,QAAQ,CAC3B,oCAAoC,EACpC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CACvD,EAAE,IAAI,EAAE,IAAA,uBAAa,EAAC,OAAO,CAAC,EAAE,EAChC,cAAc,CACf,CAAC;YACF,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,IAAA,uBAAa,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtC,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,qBAAqB;IAChC,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,0BAAa,CAAC,QAAQ,CAC3B,yCAAyC,EACzC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;;YACvB,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACvF,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;YACjD,MAAA,mBAAmB,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;gBAC5C,OAAO,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,OAAO,CAAC,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,iBAAiB;IAC5B,8DAA8D;IAC9D,UAA6C,EAAE;QAE/C,OAAO,0BAAa,CAAC,QAAQ,CAC3B,qCAAqC,EACrC,OAAO,EACP,KAAK,EAAE,cAAc,EAAE,EAAE;YACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC7E,OAAO,OAAO,CAAC;QACjB,CAAC,CACF,CAAC;IACJ,CAAC;IAMO,KAAK,CAAC,YAAY;;QACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAwB,IAAI,KAAK,EAAE,CAAC;QACjD,MAAA,IAAI,CAAC,IAAI,0CAAE,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,OAAO,CAAC,IAAI,CAAC,IAAA,sDAA+B,EAAC,OAAO,CAAC,CAAC,CAAC;QACzD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAzVD,8CAyVC","sourcesContent":["// Copyright (c) Microsoft Corporation.\n// Licensed under the MIT License.\n\nimport { GeneratedClient } from \"./generated/generatedClient.js\";\n\nimport {\n  AttestationResult,\n  AttestationSigner,\n  AttestationTokenValidationOptions,\n} from \"./models/index.js\";\n\nimport {\n  GeneratedAttestationResult,\n  InitTimeData,\n  KnownDataType,\n  RuntimeData,\n} from \"./generated/models/index.js\";\n\nimport { logger } from \"./logger.js\";\nimport { GeneratedClientOptionalParams } from \"./generated/models/index.js\";\nimport * as Mappers from \"./generated/models/mappers.js\";\n\nimport { AttestationResponse, createAttestationResponse } from \"./models/attestationResponse.js\";\n\nimport { TypeDeserializer } from \"./utils/typeDeserializer.js\";\nimport { TokenCredential, isTokenCredential } from \"@azure/core-auth\";\nimport { CommonClientOptions, OperationOptions } from \"@azure/core-client\";\nimport { bytesToString, stringToBytes } from \"./utils/utf8.js\";\nimport { _attestationResultFromGenerated } from \"./models/attestationResult.js\";\nimport { _attestationSignerFromGenerated } from \"./models/attestationSigner.js\";\nimport { AttestationTokenImpl } from \"./models/attestationToken.js\";\nimport { Uint8ArrayFromInput } from \"./utils/buffer.js\";\nimport { tracingClient } from \"./generated/tracing.js\";\n\n/**\n * Attestation Client Construction Options.\n */\nexport interface AttestationClientOptions extends CommonClientOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Operation options for the Attestation Client operations.\n */\nexport interface AttestationClientOperationOptions extends OperationOptions {\n  /**\n   * Validation options to be used to validate attestation tokens received\n   * from the attestation service for the individual operation.\n   */\n  validationOptions?: AttestationTokenValidationOptions;\n}\n\n/**\n * Optional parameters for the AttestOpenEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestOpenEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Optional parameters for the AttestSgxEnclave API.\n *\n * @param initTimeData - data provided at the time the enclave was initialized.\n * @param runTimeData - data provided at the time the SGX quote being attested was created.\n * @param draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n */\nexport interface AttestSgxEnclaveOptions extends AttestationClientOperationOptions {\n  /**\n   *initTimeData : data provided at the time the enclave was initialized, to be interpreted as binary data.\n   *\n   */\n  initTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * inittimeJson : data provided at the time the enclave was initialized, to be interpreted as JSON data.\n   */\n  initTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeData  - data provided at the time the OpenEnclave report being attested was created to be interpreted as binary data.\n   */\n  runTimeData?: Uint8Array | Buffer | Blob;\n\n  /**\n   * runTimeJson  - data provided at the time the OpenEnclave report being attested was created to be interpreted as JSON data.\n   */\n  runTimeJson?: Uint8Array | Buffer | Blob;\n\n  /**\n   * draftPolicyForAttestation - If specified, the attestation policy to be used during the attestation request.\n   */\n  draftPolicyForAttestation?: string;\n}\n\n/**\n * Operation options for the AttestTpm API.\n */\nexport interface AttestTpmOptions extends AttestationClientOperationOptions {}\n\n/**\n * Attestation Client class.\n *\n * The AttestationClient class enables access to the Attestation related APIs:\n *\n * - getOpenIdMetadata\n * - getAttestationSigners\n * - attestSgxEnclave\n * - attestOpenEnclave\n * - attestTpm\n */\nexport class AttestationClient {\n  /**\n   * Creates an instance of AttestationClient.\n   *\n   * Example usage:\n   * ```ts\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const client = new AttestationClient(\n   *    \"<service endpoint>\"\n   * );\n   * ```\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param options - Options used to configure the Attestation Client.\n   *\n   */\n  public constructor(endpoint: string, options?: AttestationClientOptions);\n\n  /**\n   * Creates an instance of AttestationClient with options and credentials.\n   *\n   * Example usage:\n   * ```ts\n   * import { AttestationClient } from \"@azure/attestation\";\n   *\n   * const client = new AttestationClient(\n   *    \"<service endpoint>\",\n   *    new TokenCredential(\"<>\"),\n   *    { tokenValidationOptions: { validateToken: false } }\n   * );\n   * ```\n   *\n   * Note that credentials are required to call the `attestTpm` API.\n   *\n   * @param endpoint - The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param credentials - Credentials used to configure the attestation client.\n   *\n   */\n  public constructor(\n    endpoint: string,\n    credentials: TokenCredential,\n    options?: AttestationClientOptions,\n  );\n  public constructor(\n    endpoint: string,\n    credentialsOrOptions?: TokenCredential | AttestationClientOptions,\n    clientOptions: AttestationClientOptions = {},\n  ) {\n    let credentialScopes: string[] | undefined = undefined;\n    let credential: TokenCredential | undefined = undefined;\n    let options: AttestationClientOptions;\n\n    if (credentialsOrOptions && isTokenCredential(credentialsOrOptions)) {\n      credential = credentialsOrOptions;\n      credentialScopes = [\"https://attest.azure.net/.default\"];\n      options = clientOptions;\n    } else {\n      options = credentialsOrOptions || {};\n    }\n\n    const internalPipelineOptions: GeneratedClientOptionalParams = {\n      ...options,\n      ...{\n        credentialScopes: credentialScopes,\n        credential: credential,\n        loggingOptions: {\n          logger: logger.info,\n          allowedHeaderNames: [\"x-ms-request-id\", \"x-ms-maa-service-version\"],\n        },\n      },\n    };\n\n    this._client = new GeneratedClient(endpoint, internalPipelineOptions);\n    this._validationOptions = options.validationOptions;\n  }\n\n  /** Attests an OpenEnclave report generated from an SGX Enclave using the OpenEnclave SDK.\n   *\n   * @param report - An OpenEnclave report generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   *\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   * @throws {@link Error} if the `initTimeJson` option is provided and the value of `initTimeJson` is not JSON.\n   * @throws {@link Error} if the `runTimeJson` option is provided and the value of `runTimeJson` is not JSON.\n   */\n  public async attestOpenEnclave(\n    report: Uint8Array | Buffer | Blob,\n    options: AttestOpenEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestOpenEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestOpenEnclave(\n          {\n            report: await Uint8ArrayFromInput(report),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attests a quote generated from SGX Enclave using the Intel SDK.\n   *\n   * @param quote - An SGX quote generated by an SGX enclave.\n   * @param options - Operation options for the attestOpenEnclave API call.\n   * @returns Returns an AttestationResponse whose body is an AttestationResult describing\n   *    the claims returned by the attestation service.\n   * @throws {@link Error} if the `initTimeData` option and `initTimeJson` option is provided.\n   * @throws {@link Error} if the `runTimeData` option and `runTimeJson` option is provided.\n   */\n  public async attestSgxEnclave(\n    quote: Uint8Array | Buffer | Blob,\n    options: AttestSgxEnclaveOptions = {},\n  ): Promise<AttestationResponse<AttestationResult>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        if (options.initTimeData !== undefined && options.initTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both initTimeData and initTimeJson.\");\n        }\n\n        if (options.runTimeData !== undefined && options.runTimeJson !== undefined) {\n          throw new Error(\"Cannot provide both runTimeData and runTimeJson.\");\n        }\n\n        const initData = await Uint8ArrayFromInput(options.initTimeData ?? options.initTimeJson);\n\n        const initTimeData: InitTimeData | undefined = initData\n          ? {\n              data: initData,\n              dataType:\n                options.initTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const runData = await Uint8ArrayFromInput(options.runTimeData ?? options.runTimeJson);\n        const runTimeData: RuntimeData | undefined = runData\n          ? {\n              data: runData,\n              dataType:\n                options.runTimeJson !== undefined ? KnownDataType.Json : KnownDataType.Binary,\n            }\n          : undefined;\n\n        const attestationResponse = await this._client.attestation.attestSgxEnclave(\n          {\n            quote: await Uint8ArrayFromInput(quote),\n            initTimeData: initTimeData,\n            runtimeData: runTimeData,\n            draftPolicyForAttestation: options.draftPolicyForAttestation ?? undefined,\n          },\n          updatedOptions,\n        );\n\n        const token = new AttestationTokenImpl(attestationResponse.token);\n        const problems = token.getTokenProblems(\n          await this._signingKeys(),\n          options.validationOptions ?? this._validationOptions,\n        );\n        if (problems.length) {\n          throw new Error(problems.join(\";\"));\n        }\n\n        const attestationResult = TypeDeserializer.deserialize(\n          token.getBody(),\n          {\n            GeneratedAttestationResult: Mappers.GeneratedAttestationResult,\n            JsonWebKey: Mappers.JsonWebKey,\n          },\n          \"GeneratedAttestationResult\",\n        ) as GeneratedAttestationResult;\n\n        return createAttestationResponse<AttestationResult>(\n          token,\n          _attestationResultFromGenerated(attestationResult),\n        );\n      },\n    );\n  }\n\n  /** Attest a TPM based enclave.\n\n   * See the  {@link https://docs.microsoft.com/en-us/azure/attestation/virtualization-based-security-protocol | TPM Attestation Protocol Reference} for more information.\n   * \n   * @param request - Incoming request to send to the TPM attestation service, Utf8 encoded.\n   * @param options - Pipeline options for TPM attestation request.\n   * @returns A structure containing the response from the TPM attestation, Utf8 encoded.\n   * \n   * @remarks\n   * \n   * The incoming requests to the TPM attestation API are stringified JSON objects.\n   * \n   * @example\n   * For example, the initial call for a TPM attestation operation is:\n   * \n   * ```js\n   * const encodedPayload = JSON.stringify({ payload: { type: \"aikcert\" } });\n   * const result = await client.attestTpm(encodedPayload);\n   * ```\n   * \n   * where stringToBytes converts the string to UTF8.\n   * \n   * Note that the attestTpm requires an attestation client which is configured with\n   * authentication credentials.\n   * \n   */\n  public async attestTpm(request: string, options: AttestTpmOptions = {}): Promise<string> {\n    return tracingClient.withSpan(\n      \"AttestationClient-attestSgxEnclave\",\n      options,\n      async (updatedOptions) => {\n        const response = await this._client.attestation.attestTpm(\n          { data: stringToBytes(request) },\n          updatedOptions,\n        );\n        if (response.data) {\n          return bytesToString(response.data);\n        } else {\n          throw Error(\"Internal error - response data cannot be undefined.\");\n        }\n      },\n    );\n  }\n\n  /**\n   * Returns the list of attestation signers which can be used to sign attestation\n   * service tokens.\n   *\n   * @param options - Client operation options.\n   * @returns the set of AttestationSigners which may be used to sign attestation tokens.\n   */\n  public async getAttestationSigners(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<AttestationSigner[]> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getAttestationSigners\",\n      options,\n      async (updatedOptions) => {\n        const signingCertificates = await this._client.signingCertificates.get(updatedOptions);\n        const signers: AttestationSigner[] = new Array();\n        signingCertificates.keys?.forEach((element) => {\n          signers.push(_attestationSignerFromGenerated(element));\n        });\n        return signers;\n      },\n    );\n  }\n\n  /**\n   * Returns the OpenID Metadata discovery document for the attestation service instance.\n   * @param options - Client operation options.\n   * @returns The OpenID metadata discovery document for the attestation service.\n   */\n  public async getOpenIdMetadata(\n    // eslint-disable-next-line @azure/azure-sdk/ts-naming-options\n    options: AttestationClientOperationOptions = {},\n  ): Promise<Record<string, unknown>> {\n    return tracingClient.withSpan(\n      \"AttestationClient-getOpenIdMetadata\",\n      options,\n      async (updatedOptions) => {\n        const configs = await this._client.metadataConfiguration.get(updatedOptions);\n        return configs;\n      },\n    );\n  }\n\n  private _client: GeneratedClient;\n  private _validationOptions?: AttestationTokenValidationOptions;\n  private _signers?: AttestationSigner[];\n\n  private async _signingKeys(): Promise<AttestationSigner[]> {\n    if (this._signers !== undefined) {\n      return this._signers;\n    }\n    const jwks = await this._client.signingCertificates.get();\n    const signers: AttestationSigner[] = new Array();\n    jwks.keys?.forEach((element) => {\n      signers.push(_attestationSignerFromGenerated(element));\n    });\n    this._signers = signers;\n    return this._signers;\n  }\n}\n"]}

package/dist/commonjs/generated/generatedClient.d.ts

@@ -0,0 +1,21 @@
+import * as coreClient from "@azure/core-client";
+import { Policy, PolicyCertificates, Attestation, SigningCertificates, MetadataConfiguration } from "./operationsInterfaces/index.js";
+import { GeneratedClientOptionalParams } from "./models/index.js";
+export declare class GeneratedClient extends coreClient.ServiceClient {
+    instanceUrl: string;
+    apiVersion: string;
+    /**
+     * Initializes a new instance of the GeneratedClient class.
+     * @param instanceUrl The attestation instance base URI, for example https://mytenant.attest.azure.net.
+     * @param options The parameter options
+     */
+    constructor(instanceUrl: string, options?: GeneratedClientOptionalParams);
+    /** A function that adds a policy that sets the api-version (or equivalent) to reflect the library version. */
+    private addCustomApiVersionPolicy;
+    policy: Policy;
+    policyCertificates: PolicyCertificates;
+    attestation: Attestation;
+    signingCertificates: SigningCertificates;
+    metadataConfiguration: MetadataConfiguration;
+}
+//# sourceMappingURL=generatedClient.d.ts.map

package/dist/commonjs/generated/generatedClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generatedClient.d.ts","sourceRoot":"","sources":["../../../src/generated/generatedClient.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,UAAU,MAAM,oBAAoB,CAAC;AAajD,OAAO,EACL,MAAM,EACN,kBAAkB,EAClB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAElE,qBAAa,eAAgB,SAAQ,UAAU,CAAC,aAAa;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IAEnB;;;;OAIG;gBACS,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,6BAA6B;IAyCxE,8GAA8G;IAC9G,OAAO,CAAC,yBAAyB;IA2BjC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,WAAW,EAAE,WAAW,CAAC;IACzB,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,qBAAqB,EAAE,qBAAqB,CAAC;CAC9C"}

package/dist/commonjs/generated/generatedClient.js

@@ -0,0 +1,78 @@
+"use strict";
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GeneratedClient = void 0;
+const tslib_1 = require("tslib");
+const coreClient = tslib_1.__importStar(require("@azure/core-client"));
+const index_js_1 = require("./operations/index.js");
+class GeneratedClient extends coreClient.ServiceClient {
+    /**
+     * Initializes a new instance of the GeneratedClient class.
+     * @param instanceUrl The attestation instance base URI, for example https://mytenant.attest.azure.net.
+     * @param options The parameter options
+     */
+    constructor(instanceUrl, options) {
+        var _a, _b;
+        if (instanceUrl === undefined) {
+            throw new Error("'instanceUrl' cannot be null");
+        }
+        // Initializing default values for options
+        if (!options) {
+            options = {};
+        }
+        const defaults = {
+            requestContentType: "application/json; charset=utf-8"
+        };
+        const packageDetails = `azsdk-js-attestation/1.0.1`;
+        const userAgentPrefix = options.userAgentOptions && options.userAgentOptions.userAgentPrefix
+            ? `${options.userAgentOptions.userAgentPrefix} ${packageDetails}`
+            : `${packageDetails}`;
+        const optionsWithDefaults = Object.assign(Object.assign(Object.assign({}, defaults), options), { userAgentOptions: {
+                userAgentPrefix
+            }, baseUri: (_b = (_a = options.endpoint) !== null && _a !== void 0 ? _a : options.baseUri) !== null && _b !== void 0 ? _b : "{instanceUrl}" });
+        super(optionsWithDefaults);
+        // Parameter assignments
+        this.instanceUrl = instanceUrl;
+        // Assigning values to Constant parameters
+        this.apiVersion = options.apiVersion || "2020-10-01";
+        this.policy = new index_js_1.PolicyImpl(this);
+        this.policyCertificates = new index_js_1.PolicyCertificatesImpl(this);
+        this.attestation = new index_js_1.AttestationImpl(this);
+        this.signingCertificates = new index_js_1.SigningCertificatesImpl(this);
+        this.metadataConfiguration = new index_js_1.MetadataConfigurationImpl(this);
+        this.addCustomApiVersionPolicy(options.apiVersion);
+    }
+    /** A function that adds a policy that sets the api-version (or equivalent) to reflect the library version. */
+    addCustomApiVersionPolicy(apiVersion) {
+        if (!apiVersion) {
+            return;
+        }
+        const apiVersionPolicy = {
+            name: "CustomApiVersionPolicy",
+            async sendRequest(request, next) {
+                const param = request.url.split("?");
+                if (param.length > 1) {
+                    const newParams = param[1].split("&").map((item) => {
+                        if (item.indexOf("api-version") > -1) {
+                            return "api-version=" + apiVersion;
+                        }
+                        else {
+                            return item;
+                        }
+                    });
+                    request.url = param[0] + "?" + newParams.join("&");
+                }
+                return next(request);
+            }
+        };
+        this.pipeline.addPolicy(apiVersionPolicy);
+    }
+}
+exports.GeneratedClient = GeneratedClient;
+//# sourceMappingURL=generatedClient.js.map

package/dist/commonjs/generated/generatedClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generatedClient.js","sourceRoot":"","sources":["../../../src/generated/generatedClient.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;AAEH,uEAAiD;AAMjD,oDAM+B;AAU/B,MAAa,eAAgB,SAAQ,UAAU,CAAC,aAAa;IAI3D;;;;OAIG;IACH,YAAY,WAAmB,EAAE,OAAuC;;QACtE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,0CAA0C;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAkC;YAC9C,kBAAkB,EAAE,iCAAiC;SACtD,CAAC;QAEF,MAAM,cAAc,GAAG,4BAA4B,CAAC;QACpD,MAAM,eAAe,GACnB,OAAO,CAAC,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,CAAC,eAAe;YAClE,CAAC,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC,eAAe,IAAI,cAAc,EAAE;YACjE,CAAC,CAAC,GAAG,cAAc,EAAE,CAAC;QAE1B,MAAM,mBAAmB,iDACpB,QAAQ,GACR,OAAO,KACV,gBAAgB,EAAE;gBAChB,eAAe;aAChB,EACD,OAAO,EAAE,MAAA,MAAA,OAAO,CAAC,QAAQ,mCAAI,OAAO,CAAC,OAAO,mCAAI,eAAe,GAChE,CAAC;QACF,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC3B,wBAAwB;QACxB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAE/B,0CAA0C;QAC1C,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC;QACrD,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAU,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,kBAAkB,GAAG,IAAI,iCAAsB,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,GAAG,IAAI,0BAAe,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,mBAAmB,GAAG,IAAI,kCAAuB,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,qBAAqB,GAAG,IAAI,oCAAyB,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAED,8GAA8G;IACtG,yBAAyB,CAAC,UAAmB;QACnD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,MAAM,gBAAgB,GAAG;YACvB,IAAI,EAAE,wBAAwB;YAC9B,KAAK,CAAC,WAAW,CACf,OAAwB,EACxB,IAAiB;gBAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;wBACjD,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;4BACrC,OAAO,cAAc,GAAG,UAAU,CAAC;wBACrC,CAAC;6BAAM,CAAC;4BACN,OAAO,IAAI,CAAC;wBACd,CAAC;oBACH,CAAC,CAAC,CAAC;oBACH,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrD,CAAC;gBACD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;SACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC5C,CAAC;CAOF;AAnFD,0CAmFC","sourcesContent":["/*\n * Copyright (c) Microsoft Corporation.\n * Licensed under the MIT License.\n *\n * Code generated by Microsoft (R) AutoRest Code Generator.\n * Changes may cause incorrect behavior and will be lost if the code is regenerated.\n */\n\nimport * as coreClient from \"@azure/core-client\";\nimport {\n  PipelineRequest,\n  PipelineResponse,\n  SendRequest\n} from \"@azure/core-rest-pipeline\";\nimport {\n  PolicyImpl,\n  PolicyCertificatesImpl,\n  AttestationImpl,\n  SigningCertificatesImpl,\n  MetadataConfigurationImpl\n} from \"./operations/index.js\";\nimport {\n  Policy,\n  PolicyCertificates,\n  Attestation,\n  SigningCertificates,\n  MetadataConfiguration\n} from \"./operationsInterfaces/index.js\";\nimport { GeneratedClientOptionalParams } from \"./models/index.js\";\n\nexport class GeneratedClient extends coreClient.ServiceClient {\n  instanceUrl: string;\n  apiVersion: string;\n\n  /**\n   * Initializes a new instance of the GeneratedClient class.\n   * @param instanceUrl The attestation instance base URI, for example https://mytenant.attest.azure.net.\n   * @param options The parameter options\n   */\n  constructor(instanceUrl: string, options?: GeneratedClientOptionalParams) {\n    if (instanceUrl === undefined) {\n      throw new Error(\"'instanceUrl' cannot be null\");\n    }\n\n    // Initializing default values for options\n    if (!options) {\n      options = {};\n    }\n    const defaults: GeneratedClientOptionalParams = {\n      requestContentType: \"application/json; charset=utf-8\"\n    };\n\n    const packageDetails = `azsdk-js-attestation/1.0.1`;\n    const userAgentPrefix =\n      options.userAgentOptions && options.userAgentOptions.userAgentPrefix\n        ? `${options.userAgentOptions.userAgentPrefix} ${packageDetails}`\n        : `${packageDetails}`;\n\n    const optionsWithDefaults = {\n      ...defaults,\n      ...options,\n      userAgentOptions: {\n        userAgentPrefix\n      },\n      baseUri: options.endpoint ?? options.baseUri ?? \"{instanceUrl}\"\n    };\n    super(optionsWithDefaults);\n    // Parameter assignments\n    this.instanceUrl = instanceUrl;\n\n    // Assigning values to Constant parameters\n    this.apiVersion = options.apiVersion || \"2020-10-01\";\n    this.policy = new PolicyImpl(this);\n    this.policyCertificates = new PolicyCertificatesImpl(this);\n    this.attestation = new AttestationImpl(this);\n    this.signingCertificates = new SigningCertificatesImpl(this);\n    this.metadataConfiguration = new MetadataConfigurationImpl(this);\n    this.addCustomApiVersionPolicy(options.apiVersion);\n  }\n\n  /** A function that adds a policy that sets the api-version (or equivalent) to reflect the library version. */\n  private addCustomApiVersionPolicy(apiVersion?: string) {\n    if (!apiVersion) {\n      return;\n    }\n    const apiVersionPolicy = {\n      name: \"CustomApiVersionPolicy\",\n      async sendRequest(\n        request: PipelineRequest,\n        next: SendRequest\n      ): Promise<PipelineResponse> {\n        const param = request.url.split(\"?\");\n        if (param.length > 1) {\n          const newParams = param[1].split(\"&\").map((item) => {\n            if (item.indexOf(\"api-version\") > -1) {\n              return \"api-version=\" + apiVersion;\n            } else {\n              return item;\n            }\n          });\n          request.url = param[0] + \"?\" + newParams.join(\"&\");\n        }\n        return next(request);\n      }\n    };\n    this.pipeline.addPolicy(apiVersionPolicy);\n  }\n\n  policy: Policy;\n  policyCertificates: PolicyCertificates;\n  attestation: Attestation;\n  signingCertificates: SigningCertificates;\n  metadataConfiguration: MetadataConfiguration;\n}\n"]}

package/dist/commonjs/generated/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./models/index.js";
+export { GeneratedClient } from "./generatedClient.js";
+export * from "./operationsInterfaces/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/commonjs/generated/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/generated/index.ts"],"names":[],"mappings":"AAQA,cAAc,mBAAmB,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,cAAc,iCAAiC,CAAC"}